4144 matches found
CVE-2016-9962
RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or...
CVE-2016-9962
RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or...
CVE-2016-9962: Concurrent Execution using Shared Resource with Improper Synchronization
RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or...
PT-2017-10202
Name of the Vulnerable Software and Affected Versions Sophos Web Appliance version 4.2.1.3 Description The issue affects the web administrative interface of the Sophos Web Appliance, specifically in the MgrReport.php component, which handles blocking and unblocking IP addresses. The problem arise...
CVE-2016-7980
Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted validerxml request. NOTE: this issue can be combin...
Docker Patches Privilege Escalation Vulnerability
Docker has patched a privilege escalation vulnerability CVE-2016-9962 that could lead to container escapes, allowing a hacker to affect operations of a host from inside a container. The vulnerability is rated high severity by some Linux distributions such as Arch Linux, which traces the problem t...
CVE-2016-7999: Server-Side Request Forgery (SSRF)
ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to conduct server side request forgery SSRF attacks via a URL in the varurl parameter in a validerxml action...
PT-2017-9453
Name of the Vulnerable Software and Affected Versions SPIP versions 3.1.2 and earlier Description The issue allows remote attackers to conduct server-side request forgery SSRF attacks. This is achieved by providing a URL in the var url parameter within a valider xml action, targeting the...
docker: insecure opening of file-descriptor allows privilege escalation
The runc component used by docker exec feature of docker allowed additional container processes to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain low-level access to these new processes during initialization. An attacker can,...
docker: insecure opening of file-descriptor allows privilege escalation
The runc component used by docker exec feature of docker allowed additional container processes to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain low-level access to these new processes during initialization. An attacker can,...
docker: insecure opening of file-descriptor allows privilege escalation
The runc component used by docker exec feature of docker allowed additional container processes to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain low-level access to these new processes during initialization. An attacker can,...
CVE-2016-9962
The runc component used by docker exec feature of docker allowed additional container processes to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain low-level access to these new processes during initialization. An attacker can,...
runC: Privilege escalation
Background RunC is a CLI tool for spawning and running containers according to the OCI specification. Description A vulnerability was discovered in runC that allows additional container processes via ‘runc exec’ to be ptraced by the pid 1 of the container. This allows the main processes of the...
RunC Exec Vulnerability | Cloud Foundry
Medium Vendor Open Containers Initiative Description RunC allowed additional container processes via runc exec to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the...
PHPMailer < 5.2.19 - Sendmail Argument Injection (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'PHPMailer Sendmail Argument Injection', 'Description' = %q PHPMailer versions up to and including 5.2.19 are affected by a...
CVE-2016-9998
SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/infoplugin.php involving the "$plugin" parameter, as demonstrated by a /ecrire/?exec=infoplugin URL...
PT-2016-7892
Name of the Vulnerable Software and Affected Versions SPIP version 3.1.x Description The issue is related to a Reflected Cross Site Scripting problem. It affects the /ecrire/exec/puce statut.php endpoint, specifically involving the id parameter. An example of exploitation is through a...
PT-2016-7893
Name of the Vulnerable Software and Affected Versions SPIP versions 3.1.x Description The issue concerns a Reflected Cross Site Scripting problem. It involves the /ecrire/exec/info plugin.php endpoint, specifically the $plugin parameter. An example of exploitation is through a /ecrire/?exec=info...
CVE-2016-5828
A vulnerability in the handling of Transactional Memory on powerpc systems was found. An unprivileged local user can crash the kernel by starting a transaction, suspending it, and then calling any of the exec class system calls...